ACA Cold Outreach: TCPA + ACA Marketing Rules Every Insurance Agency Should Know

The TCPA Stakes

The Statutory Floor: TCPA at 47 USC 227

The Telephone Consumer Protection Act, codified at 47 USC 227, sets the federal floor for telephone marketing. Damages run $500 per negligent violation and up to $1,500 per willful violation, and there is no cap on aggregate damages — making class actions the dominant litigation pattern. The FCC has primary rulemaking authority and has issued extensive TCPA orders and rules defining how the statute is enforced.

Three pieces of the rule matter most for ACA cold outreach. First, autodialed or prerecorded calls to cell phones for marketing require prior express written consent (PEWC). Second, predictive dialers are subject to the FCC's 3% per-day per-campaign call-abandonment cap. Third, the National Do Not Call Registry must be scrubbed regularly, and the agency must maintain its own internal DNC list with a granular consumer-revocation pathway.

How Most Agencies Cross the Line Without Realizing It

Many agency principals assume that buying leads from a vendor inherits the vendor's consent posture. That assumption is wrong. Consent is specific to the calling party named in the consent record; lead-vendor PEWC that does not name your agency is not consent for your agency to call. The plaintiff bar specifically targets this gap, and the standard defense — "we bought leads with consent" — is not what the statute or the case law actually require.

ACA Marketing Rules on Top of TCPA

On top of TCPA, ACA marketing has its own layer of rules. The HealthCare.gov marketing standards govern how agents and brokers represent themselves, the Marketplace, and plan benefits in consumer communications. CMS marketplace rules prohibit lookalike sites, misrepresentation of Marketplace identity, and agent-of-record fraud. State-based exchange rules add their own marketing layers, as we covered in the SBE multi-state map.

The interaction matters. A call that is technically TCPA-compliant on consent but represents the agency as "the Marketplace" or "Healthcare.gov" is an ACA marketing violation that produces a CMS finding and possibly an FFM termination. Cold outreach in this market is a stack of compliance regimes, not a single one, and the principal who treats it as TCPA-only will miss half the exposure.

The Agency-Initiated Click-to-Call Standard

The single biggest TCPA risk reduction available to an agency is the move away from predictive dialing toward agent-initiated click-to-call. The FCC's 3% abandonment cap is calculated daily per campaign. A single bad day of predictive dialing — staff under, queue surge, mismanaged pacing — pushes a campaign over the cap, and that record is exactly what plaintiffs ask for in discovery. Agent-initiated dialing eliminates the abandoned-call risk class entirely because every call is connected to a live agent at the moment of answer.

The trade-off is talk time per agent: predictive dialing maximizes seconds-on-call, while agent-initiated maximizes calls-per-agent at acceptable risk. For a regulated, lawsuit-targeted vertical like ACA, the math almost always favors the agent-initiated model. As we covered in the broader single-line vs multi-line economics piece, the abandonment risk is not theoretical — it is the structural exposure that drives most of the multi-million-dollar settlements in this space.

The Floor-Wide Outreach Guardrails

State-Level Telemarketing: Where Federal Is Just the Floor

Several states layer their own telemarketing rules on top of the federal TCPA. Florida's Mini-TCPA, Oklahoma's Telephone Solicitation Act, and similar state statutes have produced their own private rights of action and class actions. Some states require additional disclosures, restrict calling hours more tightly, or prohibit specific dialer technologies entirely. An agency operating multi-state cannot apply the federal floor uniformly and assume coverage.

Practical compliance approach: maintain a state-by-state outreach rule library, refresh annually, and bake state-specific suppression into the dialing platform. The compliance officer's job is to know that Florida and Oklahoma look different from a federal-only state, and to enforce the difference at the dialing layer rather than asking agents to remember it.

The Audit Cadence: Quarterly, Annually, On-Event

The Cost of Getting It Wrong

TCPA settlements in the ACA space have run from low seven figures for individual agency cases to nine-figure settlements at industry-leading scale. The plaintiff bar is sophisticated, well-funded, and specifically targets agencies running predictive dialers, recycled lead lists, and weak revocation handling. An agency that has not invested in compliance infrastructure is operating with a meaningful tail risk that does not show up in any operational metric until the demand letter arrives.

For ACA specifically, the issue is amplified by CMS marketing-rule overlay. A complaint to the FFM consumer-protection apparatus can produce both a private TCPA claim and a CMS finding that affects FFM standing. Agencies that lose FFM agreements lose the ability to operate in the ACA market entirely, regardless of any other compliance posture. That is the dimension that makes ACA cold outreach uniquely high-stakes among insurance verticals.

Key Takeaways for Agency Operators

Most agencies that get hit with class actions did not believe they were across the line; they believed their lead vendor's compliance posture, trusted their dialer's pacing settings, and treated the operating posture as good enough. That belief is not enough. A compliance program that the principal owns, audits, and updates regularly is what separates the agencies that grow ACA volume sustainably from the agencies that find out their lead pipeline was a liability after the fact.